Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/e28fb726-a836-3867-baf8-1c3b583b3d9a.roa
File: e28fb726-a836-3867-baf8-1c3b583b3d9a.roa (raw, json)
Hash identifier: Js44jVL+ylWIdLKSQYDPT7oJTnPPtd6vh4lbwumUCxk=
Subject key identifier: E8:0E:57:14:2F:79:D4:19:91:2D:3C:A1:84:2A:CE:6C:7D:DF:3D:06
Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial: 010D0C9F4328584851A576683E4C006636B92FC0
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/e28fb726-a836-3867-baf8-1c3b583b3d9a.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 394161
IP address blocks: 192.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:76:68:3e:4c:00:66:36:b9:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=fa3cb0da-feeb-4655-9179-ec4af7f7305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:c3:61:dd:f5:17:70:a0:fa:7a:0e:24:48:
41:c4:a7:db:d9:04:b6:e8:96:58:43:e8:2e:12:49:
9d:eb:5f:05:c2:a5:68:d2:c5:a2:86:21:2f:f7:6b:
98:ff:06:a3:e5:b0:ba:0b:68:7d:0c:c4:6a:24:36:
12:a2:77:e2:9e:9c:b6:2a:0f:0c:9d:7a:c2:9b:0a:
56:3d:e4:29:66:43:e7:a2:b1:bb:02:a9:c9:01:b3:
48:d0:1f:b8:07:20:99:2d:8b:70:7a:88:c9:31:e8:
b1:49:35:fc:79:9c:68:49:e5:2d:70:fa:1a:9b:4d:
5d:31:1b:61:9d:96:5c:0d:33:b4:9d:96:45:04:14:
52:1b:b7:ad:26:3b:6f:be:15:05:dd:27:4d:52:3a:
98:a9:e5:e7:27:67:04:ea:6e:75:ac:5c:a3:a1:d6:
20:a0:0d:73:26:21:cd:88:cf:34:62:6c:1b:35:d4:
74:e9:a0:ab:09:91:4e:f4:73:18:61:29:f4:28:c8:
a5:21:4f:66:d3:9b:b3:be:b9:75:ce:4d:f6:ad:f3:
a4:41:7a:d5:6c:05:2a:ae:35:b1:41:a2:25:b8:60:
87:a7:39:3b:a3:22:1e:3c:35:e2:80:70:83:be:2c:
ad:75:c6:b0:fc:8f:f1:3c:7e:3a:d2:84:eb:bf:1f:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0E:57:14:2F:79:D4:19:91:2D:3C:A1:84:2A:CE:6C:7D:DF:3D:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/e28fb726-a836-3867-baf8-1c3b583b3d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
X509v3 Authority Key Identifier:
keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.95.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:a2:21:b0:4f:94:65:78:ae:fa:14:45:53:49:78:93:55:9d:
96:13:f0:c3:81:7e:de:b5:65:9c:6b:06:d0:fe:d2:e2:b3:92:
56:41:ee:c6:37:59:6c:7e:5a:18:e9:8e:18:48:a1:96:d0:fe:
38:43:ad:6f:55:69:27:55:40:59:c0:03:7b:e9:22:85:cb:90:
11:9b:9e:27:b0:e7:27:94:cd:cc:c6:cd:61:d2:8c:0c:d7:ee:
af:64:12:dd:e6:9d:61:46:10:05:6b:63:bd:3b:cb:4a:da:bc:
82:b0:37:7b:2b:75:15:67:0f:86:82:54:13:66:33:ed:fb:7e:
b8:af:c9:89:48:cc:42:b9:b3:96:5a:34:30:89:09:43:56:f8:
f3:55:87:1e:47:66:09:bc:83:78:56:35:3a:58:10:e8:a6:23:
99:cb:97:7d:20:d9:4d:4c:4b:dd:39:d6:68:75:4f:bb:46:21:
62:a4:73:a0:14:2c:e5:a6:e6:62:e3:5d:7c:39:1a:9d:a6:65:
45:3f:2d:c8:42:ea:3e:ce:84:fa:cc:64:e9:44:f0:49:11:b8:
f5:9b:56:33:54:63:af:b1:ad:93:7e:97:91:53:4f:a3:29:82:
73:73:18:cf:ca:a4:2d:f5:55:b9:73:e1:01:84:21:50:87:d4:
65:23:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:50:57 2025 by rpki-client